d935c40dd215e5279eb894fb88b4afc626b35da47b247f92efceac5f811af59e

Resubmissions

08/02/2023, 20:19

08/02/2023, 19:59

max time kernel
229s
max time network
237s
platform
windows10-2004_x64
resource
win10v2004-20221111-de
resource tags

arch:x64arch:x86image:win10v2004-20221111-delocale:de-deos:windows10-2004-x64systemwindows
submitted
08/02/2023, 20:19

Target

Google Maps.exe
Size

656.2MB
MD5

7f4be2a8d3ec73342f2a0dcbd7a84e2a
SHA1

9db7f64aad18afe9d87be2a0b7e549fbb0660a71
SHA256

00d229235da51b0f6d665760fbcd8c07b553cbc2483cdf11332d39f577ff4543
SHA512

4baf4e050fb7859def04ab9e3776b315d58bd553e3eea35636a633f7a4922e6c647f3eea1141fe2749bf0f9da95e4e4bdced624ccf90c685c9fb3a72232538b9
SSDEEP

3072:5yliOufWjoQCJhHUgpgHDSnlqt5ioPOlzuBSUq3GEzVT7O1i0vkWe6e5Lv:5yl0f7QCJNQDS253PhBSHv5W19kzv

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4416 set thread context of 5036	4416	Google Maps.exe	80

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 4416 wrote to memory of 5036	4416	Google Maps.exe	80
PID 4416 wrote to memory of 5036	4416	Google Maps.exe	80
PID 4416 wrote to memory of 5036	4416	Google Maps.exe	80
PID 4416 wrote to memory of 5036	4416	Google Maps.exe	80
PID 4416 wrote to memory of 5036	4416	Google Maps.exe	80
PID 4416 wrote to memory of 5036	4416	Google Maps.exe	80
PID 4416 wrote to memory of 5036	4416	Google Maps.exe	80
PID 4416 wrote to memory of 5036	4416	Google Maps.exe	80

C:\Users\Admin\AppData\Local\Temp\Google Maps.exe
"C:\Users\Admin\AppData\Local\Temp\Google Maps.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:4416
- C:\Users\Admin\AppData\Local\Temp\Google Maps.exe
  "C:\Users\Admin\AppData\Local\Temp\Google Maps.exe"
  2⤵
  PID:5036

memory/4416-132-0x00000000002C0000-0x00000000002F2000-memory.dmp

Filesize
200KB

Download
memory/4416-133-0x00000000051A0000-0x0000000005744000-memory.dmp

Filesize
5.6MB

Download
memory/4416-134-0x0000000004C60000-0x0000000004CC6000-memory.dmp

Filesize
408KB

Download
memory/5036-136-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/5036-138-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/5036-139-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download